0b63b680c6bc310939629a32617f4053 | Triage

Sharing

General

Target

0b63b680c6bc310939629a32617f4053
Size

8KB
MD5

0b63b680c6bc310939629a32617f4053
SHA1

d97381032128dd5777d97cfbcb130b077bea607f
SHA256

25eb9eec5254fb9192baf8acac24ac59b6c4fe34f873ed52c611e527399e2a33
SHA512

52e91ca5101efb2b275f756bb2e1e9a66ff8ecca62b8e4ec7d1836094f821850153e501f98c20cc8ffa0279410a93ab40d735bea5971747aed624036e3df7b54
SSDEEP

96:WiBIT00GvJL5Ed3glTNyvbKTptcXxD+ElTXELNGqOa3PZvJuHna2ACP8BWoj:8+vDJLnWV+Px5JQHaVCP8nj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b63b680c6bc310939629a32617f4053

Files

0b63b680c6bc310939629a32617f4053
.exe windows:4 windows x86 arch:x86

a5e83cd92ce1c1ad812fc941cd4a82ea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm50

ord622
ord632
DllFunctionCall
__vbaExceptHandler
ord607
ProcCallEngine
ord644
ord645
ord570
ord576
ord100
ord617
ord581

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 860B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rebld_r
Size: 312B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rebld_i
Size: 167B - Virtual size: 167B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE